ICSA-21-231-01

icsaUScisa_csaf_ot

ICSA-21-231-01_AVEVA SuiteLink Server

view advisory published 2021-08-19

Sharon Brizinov of Claroty reported these vulnerabilities to AVEVA.

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2021-32999UShigh7.5—
Improper handling of exceptional conditions in SuiteLink server while processing command 0x01
CVE-2021-32987UShigh7.5—
Null pointer dereference in SuiteLink server while processing command 0x0b
CVE-2021-32979UShigh7.5—
Null pointer dereference in SuiteLink server while processing commands 0x04/0x0a
CVE-2021-32971UShigh7.5—
Null pointer dereference in SuiteLink server while processing command 0x07
CVE-2021-32963UShigh7.5—
Null pointer dereference in SuiteLink server while processing commands 0x03/0x10
CVE-2021-32959UScritical9.8—
Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06
02

references

External citations — patches, advisories, analysis.

03

remediations (48)

  • MitigationAVEVA Batch Management

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Batch Management

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Batch Management

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Batch Management

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Batch Management

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Batch Management

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Communication Drivers Pack

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Communication Drivers Pack

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Communication Drivers Pack

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Communication Drivers Pack

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Communication Drivers Pack

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Communication Drivers Pack

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Data Acquisition Servers

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Data Acquisition Servers

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Data Acquisition Servers

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Data Acquisition Servers

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Data Acquisition Servers

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Data Acquisition Servers

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Historian

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Historian

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Historian

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Historian

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Historian

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Historian

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA InTouch

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA InTouch

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA InTouch

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA InTouch

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA InTouch

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA InTouch

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA MES

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA MES

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA MES

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA MES

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA MES

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA MES

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Operations Integration Core

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Operations Integration Core

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Operations Integration Core

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Operations Integration Core

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Operations Integration Core

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA Operations Integration Core

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA System Platform

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA System Platform

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA System Platform

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA System Platform

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA System Platform

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

  • MitigationAVEVA System Platform

    Users with affected versions of these products should apply the corresponding security update. Note a subset of the updates requires activation-based licensing.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan